Nortel Networks Corporation

Crossbeam Systems, Inc.

Blue Coat Systems, Inc.

Paul S Gallo

Heather D Achilles

Weidong Xu

Moisey Akerman

Yevgeny Korsunsky

Timothy Martin

Harsh Kapoor

Stephen D Justus

Charles Ching Lee

Chunsheng Fu

Terry Pearson

John C Ferguson

Nanying Yin

Jc Ferguson

Dan Sullivan

Mike Fortuna

Jim Meredith

Larry B Manor

Peter Pothier

Tom Colley

Kevin Klapper

Mark Podlipec

Bill Miller

A flow processing facility, which uses a set of artificial neurons for pattern recognition, such as a self-organizing map, in order to provide security and protection to a computer or computer system supports unified threat management based at least in part on patterns relevant to a variety of types of threats that relate to computer systems, including computer networks. Flow processing for switching, security, and other network applications, including a facility that processes a data flow to address patterns relevant to a variety of conditions are directed at internal network security, virtualization, and web connection security. A flow processing facility for inspecting payloads of network traffic packets detects security threats and intrusions across accessible layers of the IP-stack by applying content matching and behavioral anomaly detection techniques based on regular expression matching and self-organizing maps. Exposing threats and intrusions within packet payload at or near real-time rates enhances network security from both external and internal sources while ensuring security policy is rigorously applied to data and system resources. Intrusion Detection and Protection (IDP) is provided by a flow processing facility that processes a data flow to address patterns relevant to a variety of types of network and data integrity threats that relate to computer systems, including computer networks.

Systems and methods for processing data flows

Methods and systems for flow processing and switching, security, and other network applications, including a facility that processes a data flow to address patterns relevant to a variety of conditions are directed at internal network security, virtualization, and web connection security are described. Such flow processing facilities may be used for inspecting network traffic packet payloads to detect security threats and intrusions across accessible layers of the network IP stack by applying content matching and behavioral anomaly detection techniques based on regular expression matching and self-organizing maps. Exposing threats and intrusions within packet payload at or near real-time rates enhances network security from both external and internal sources while ensuring security policy is rigorously applied to data and system resources.

A method, apparatus and article of manufacture for discarding a data packet. The data packet is classified according to a type of service (TOS) indicator and modified with an internal service class (ISC) indicator according to the TOS indicator. The data packet is modified with a watermark (WM) indicator according to the availability of a system resource. The ISC, WM and a drop preference (DP) indicator of the data packet are compared to a committed information rate (CIR). The packet is discarded if the DP exceeds the CIR.

Method and apparatus for discarding data packets through the use of descriptors

A method, apparatus and article of manufacture for routing a data packet in a fault tolerant manner. A data packet is received from an incoming data channel and is transferred to a switching engine (SE) through an access processor engine (APE). A route for the data packet is generated using a central processor resource (CPR). The data packet is transferred from the SE to an outgoing trunk physical module (TP) using the route.

Method and apparatus for a fault tolerant router architecture

A method, apparatus and article of manufacture for enabling flexible egress traffic queuing. A queue selection word is generated and a data queue is monitored for data. An output mask word is generated associating the data queue to an output channel and a priority value if the data queue contains data. The output channel is processed according to the queue selection word and the output mask word.

Method and apparatus for flexible egress traffic queuing

The present invention provides a system and method to implement a packet switch buffer for unicast and multicast data. Incoming data packets are first stored in an input buffer memory. These data packets are examined to determine where in a primary output memory to place the data packets. The data packets are then transferred from the input buffer memory to the primary output memory. Afterward, the data packets are transferred from the primary output memory to a secondary output memory, and then from the secondary output memory to line card interface units (LCIUs).

System and method to implement a packet switch buffer for unicast and multicast data

The present invention provides a system and method to implement a packet switch buffer. Incoming data packets are temporarily stored in an input buffer memory. Data packets in the input buffer memory are then examined to determine locations in an output buffer memory where the data packets should be transferred. Data packets in the input buffer memory are then transferred to the output buffer memory, such that data packets destined for a line card are written in an output memory block corresponding to the line card. Afterward, data packets in the output buffer memory are extracted and forwarded to designated output destinations.

System and method to implement a packet switch output buffer

A method, apparatus and article of manufacture for prioritization of control plane traffic in a router. A destination slot is allocated in a sliding window buffer via a control channel. A data packet is received via a data channel. An acknowledgement that the data packet was received is sent via the control channel. The destination slot is released via the control channel.

Method and apparatus for the prioritization of control plane traffic in a router

Growing community of inventors

Newton, MA, United States of America

Paul S Gallo